kx509: Add desired_life to Kx509CSRPlus

This commit is contained in:
Nicolas Williams
2019-10-27 16:22:24 -05:00
parent a7a1d798c3
commit 4d4c7078cd

View File

@@ -7,7 +7,7 @@
KX509 DEFINITIONS ::= BEGIN KX509 DEFINITIONS ::= BEGIN
IMPORTS Extensions FROM rfc2459 IMPORTS Extensions FROM rfc2459
AUTHDATA-TYPE FROM krb5; KerberosTime, AUTHDATA-TYPE FROM krb5;
KX509-ERROR-CODE ::= INTEGER { KX509-ERROR-CODE ::= INTEGER {
KX509-STATUS-GOOD(0), KX509-STATUS-GOOD(0),
@@ -69,7 +69,10 @@ Kx509CSRPlus ::= [APPLICATION 35] SEQUENCE {
authz-datas SEQUENCE OF AUTHDATA-TYPE, authz-datas SEQUENCE OF AUTHDATA-TYPE,
-- Desired certificate Extensions such as KeyUsage, ExtKeyUsage, or -- Desired certificate Extensions such as KeyUsage, ExtKeyUsage, or
-- subjectAlternativeName (SAN) -- subjectAlternativeName (SAN)
exts Extensions OPTIONAL exts Extensions OPTIONAL,
-- Desired certificate lifetime
req-life KerberosTime OPTIONAL,
...
} }
-- Version 2 -- Version 2